HackingProfessional ServicesProfessional ServicesEmployee Data InvolvedIdentity (basic)Government IDMediumContained

Corban OneSource, LLC

bd_5e362bae54b7ef89 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 9, 2025

Filed

Feb 4, 2026

To disclose

21 weeks

Affected

12state residents only

Linked

5 records

Confidence

66%

Full breach record for Corban OneSource, LLC →

Corban OneSource, LLC notified the NH Attorney General of unauthorized access to its network on September 9, 2025. The investigation determined that a file containing the names and Social Security numbers of 12 New Hampshire residents (employees, customers, or vendors) was accessed. Notifications were sent on February 4, 2026, and one year of credit monitoring was offered.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d21 weeks discovery → filing

Incident timeline

discovery → filing · 21 weeks / 148 days

Sep 9, 2025

Begins

Sep 9, 2025

Discovered

Feb 4, 2026

Filed

vs. sector median

+2 wks slower

This filing is one of 5 records about the same incident.View merged incident

A leak claim by qilin about this victim was first seen 123 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteqilinbd_04d1ab9350ae5a6b2025-10-03 · +124dVerified by operator

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_28e8b0feb61487982026-02-04Verified
Indiana State AGbd_821d65efb8e4c49d2026-02-04Verified by operator
Massachusetts State AGbd_e4fb8b6637f691862026-02-04Verified by operator

Name: Corban OneSource, LLC
norm: corban onesource
Domain: corbanone.com

Name: Corban OneSource, LLC
norm: corban onesource
Domain: corbanone.com
Industry: Professional Servicesllm

Discovered: Sep 9, 2025
Breach occurred: Sep 9, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 4, 2026
Affected individuals: 12state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unknown
Regulator citations: Notified the New Hampshire Attorney General's office

During the incident: Took steps to secure the network
Launched an investigation into the matter
Notified law enforcement of the incident
Sent a notification letter via U.S. First-Class mail to the New Hampshire residents
Offering notified individuals a complimentary one-year subscription in credit monitoring and identity theft protection services through Epiq
Established a dedicated, toll-free call center for individuals to call with questions
Changes made: Taken additional steps to enhance their security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(148 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGFeb 4 · first

Indiana State AGFeb 4 · first

Massachusetts State AGFeb 4 · first

New Hampshire State AGFeb 4 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/corban-onesource-20260204.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 4, 2026
Raw hash: fb69169980320ee3760d5a434c4b03d18fd132e2a9a5a2324fab0fdf85e58aea

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityCorban OneSource, LLC

Victim entityCorban OneSource, LLC

Incidentdiscovered Sep 9, 2025

Stated responseTook steps to secure the network

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov